$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer File: D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer (raw, json) Hash identifier: vS131zxt7duVA4aIXUGhKBaIwPKGOFpnaubxWHubl28= Subject key identifier: D4:3E:AD:E5:B8:CD:6D:CD:80:F7:0F:D4:6A:6D:1B:F4:C7:50:DC:BD Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 294F038228BF00AB0A846A6E6E6A25F349ABD81E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 14 Feb 2025 18:05:03 +0000 Certificate not after: Fri 13 Feb 2026 18:10:03 +0000 Subordinate resources: AS: 273167 IP: 2803:d250::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 14:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:4f:03:82:28:bf:00:ab:0a:84:6a:6e:6e:6a:25:f3:49:ab:d8:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 14 18:05:03 2025 GMT Not After : Feb 13 18:10:03 2026 GMT Subject: CN=D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4d:d9:4d:c0:84:14:ed:8e:5b:eb:36:4b:f5: e3:2e:a1:09:c8:a6:91:5d:96:ae:35:f7:e1:f0:e7: 5f:4b:f3:5e:b4:c4:8e:ce:91:e5:70:af:6f:bc:89: ad:6a:0a:87:d6:e5:fa:05:ee:72:a6:0a:06:22:7f: 1e:4c:d6:11:71:72:d5:33:63:2d:f8:a2:64:c8:a5: 12:68:1e:5c:49:07:44:61:b6:6f:ef:ac:52:dc:0b: 5a:b3:13:60:9f:ce:69:cb:30:65:14:80:64:71:b1: 40:1a:31:08:6e:ce:45:09:f0:a2:5d:7b:1d:f1:c1: fa:ad:6f:95:4c:77:25:c0:04:b2:c9:82:1b:b2:04: b6:17:61:08:bf:80:36:2e:d3:68:2c:8a:d8:58:1e: 3a:a3:63:0d:88:5c:a2:58:19:13:9b:72:d6:4c:5d: 0d:0e:f3:98:af:cc:1e:aa:ad:f1:58:52:d3:34:f2: 94:f9:34:d7:fc:35:41:34:e2:a3:17:c6:17:ae:ac: c8:82:58:53:d2:b9:c2:45:7d:8d:4e:57:0f:fd:f6: c9:e4:d8:48:c0:19:76:95:d6:51:60:83:70:47:31: 6d:66:b9:05:9b:74:b9:db:ce:cf:60:4c:ed:c2:3f: d7:44:c4:99:e5:a8:b4:f5:4e:aa:b8:de:06:11:96: 8c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D4:3E:AD:E5:B8:CD:6D:CD:80:F7:0F:D4:6A:6D:1B:F4:C7:50:DC:BD X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:d250::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273167 Signature Algorithm: sha256WithRSAEncryption 3b:b6:4f:c5:9e:13:c3:09:f1:48:dc:55:ca:e7:4e:83:a9:15: b2:ea:90:5d:3c:44:fa:ff:af:1d:5b:63:66:67:e5:b3:9d:4c: b2:46:9c:12:1d:a1:9e:aa:38:df:4b:fb:c0:e4:95:40:d6:22: 22:9d:43:4c:6a:56:f3:b9:02:73:cf:73:02:d6:35:2e:8d:ce: 58:bb:b9:9b:ab:8f:da:14:33:21:29:45:03:9c:ed:24:b0:f4: ad:f2:a8:64:19:5b:f7:e2:4e:3f:ac:b4:32:9f:23:b7:51:63: 79:25:48:2c:29:70:23:1f:1f:4f:78:1e:be:1a:10:66:a4:6d: 78:1e:a3:2a:e7:9f:86:6e:d3:75:92:13:ea:ae:a8:bf:98:fe: 6b:87:eb:b4:63:98:57:e2:a1:d6:ea:1b:ae:b6:a7:85:cd:ec: b3:ac:d9:78:37:65:24:9a:f0:a0:13:bb:ce:f2:c5:75:a6:23: b3:72:bf:35:84:8e:79:d3:9a:cb:27:74:3f:dc:3c:98:70:fe: 1a:00:33:54:e2:16:c7:9a:41:6c:04:7d:99:59:c1:4e:4f:e8: 41:54:86:d2:9b:26:a7:98:a8:46:b5:fe:87:c0:ba:3b:04:7f: ed:3d:cc:00:4d:5d:cf:7a:58:f0:0c:5c:13:e4:d4:b4:9d:0d: a7:bc:92:40 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUKU8Dgii/AKsKhGpubmol80mr2B4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMTQxODA1MDNaFw0yNjAyMTMxODEwMDNaMDMxMTAvBgNV BAMTKEQ0M0VBREU1QjhDRDZEQ0Q4MEY3MEZENDZBNkQxQkY0Qzc1MERDQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmTdlNwIQU7Y5b6zZL9eMuoQnI ppFdlq419+Hw519L8160xI7OkeVwr2+8ia1qCofW5foF7nKmCgYifx5M1hFxctUz Yy34omTIpRJoHlxJB0Rhtm/vrFLcC1qzE2CfzmnLMGUUgGRxsUAaMQhuzkUJ8KJd ex3xwfqtb5VMdyXABLLJghuyBLYXYQi/gDYu02gsithYHjqjYw2IXKJYGRObctZM XQ0O85ivzB6qrfFYUtM08pT5NNf8NUE04qMXxheurMiCWFPSucJFfY1OVw/99snk 2EjAGXaV1lFgg3BHMW1muQWbdLnbzs9gTO3CP9dExJnlqLT1Tqq43gYRloylAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTUPq3luM1tzYD3 D9RqbRv0x1DcvTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDc0Q0EyRTUzMEQ1RDg3NjUxMzQzMDk4 M0FBNDJCQkU4RUZFQjA2OTEyNTM5REI3RDJCOERFQ0ZFQTUxNjIxOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ENzRDQTJFNTMwRDVEODc2NTEzNDMwOTgzQUE0MkJCRThFRkVCMDY5MTI1 MzlEQjdEMkI4REVDRkVBNTE2MjE5LzAvRDQzRUFERTVCOENENkRDRDgwRjcwRkQ0 NkE2RDFCRjRDNzUwRENCRC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPSUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKw8wDQYJKoZIhvcNAQELBQADggEBADu2T8We E8MJ8UjcVcrnToOpFbLqkF08RPr/rx1bY2Zn5bOdTLJGnBIdoZ6qON9L+8DklUDW IiKdQ0xqVvO5AnPPcwLWNS6Nzli7uZurj9oUMyEpRQOc7SSw9K3yqGQZW/fiTj+s tDKfI7dRY3klSCwpcCMfH094Hr4aEGakbXgeoyrnn4Zu03WSE+quqL+Y/muH67Rj mFfiodbqG662p4XN7LOs2Xg3ZSSa8KATu87yxXWmI7NyvzWEjnnTmssndD/cPJhw /hoAM1TiFseaQWwEfZlZwU5P6EFUhtKbJqeYqEa1/ofAujsEf+09zABNXc96WPAM XBPk1LSdDae8kkA= -----END CERTIFICATE-----Generated at Mon Apr 7 08:54:20 2025 by rpki-client